skysight-inc/HackerNews huggingface dataset:
I visited Sizewell A for a tour as a young teenager, though I don't remember much about it beyond walking over the top of the reactor, and getting an educational comic booklet about how nuclear power worked. I think this was when they were going through the planning process to build Sizewell B, so they were probably in a "community outreach and PR" phase.

You can see both from a way along the coast; personally I think they add to the landscape rather than detract. The sea is also apparently noticeably warmer in the immediate vicinity due to the cooling outflow.
Can we please have a really brief description in the title that explains why the person was famous?
> The reality is that the failure mode absolutely sucks. Dropping one and having it survive is a neat party trick, but all it takes is one break for the observer to completely swear off the experience forever.

I'd much rather sweep up the equivalent of very coarse sand than deal with shards of glass. There's no need to keep the dog away, or wrap the stuff in a newspaper so you don't shred the bin bag etc. You just sweep it up and are done with it.
That doesn't take into account zoonotic crossovers like covid and the handful of avian flu cases in recent the
Do you have any additional info about how they do that? (especially cost-efficiently)
The ones I'm familiar with (e.g. Riot's) do use statistics, along with just about anything else you can think of. Code that does nothing but act as a honeypot for cheaters? Of course that's a thing. I'm actually surprised that people focus so much on the kernel part given the scale of the data collection, though the collected data is pretty innocuous.
I was referring to the paradigm but sorry yes you are right the parent was specifically about usenet.

> More generally, while a few people are willing to pay for access to a discussion service, most aren't

Agreed.
They were legally compelled to add IP logging for that specific user. After this incidence, they went on to obtain a court ruling in Switzerland, where they operate, so that this specific attack cannot happen again. In their blog post about it [1], they instruct concerned users to access their account over Tor.

Of course when Proton say they don't log, we just have to take their word for it. People who don't want that element of trust can use Tor. Personally I believe their story in this case.

[1] https://proton.me/blog/climate-activist-arrest
Since atheists became antitheists.

I was an atheist, but had no issues with my children becoming Christians. I think today's atheists think they need to be Richard Dawkins.
> Here in Oklahoma, insurance rates have skyrocketed in the last couple years.

Insurance company profiteering is a disaster but that's a whole different topic.

But remember that rental properties are also insured. And the renter is paying for that insurance, it's just bundled in the rental price. So renters are also paying the wild insurance hikes.

And utilities like gas are generally directly paid by renters, so no difference.
32-bit PowerPC implementations do support little endian mode, but not from power-on reset. You can have a little stub handler that basically does the switch to LE by setting MSR.{LE,ILE} via srr1 and then performing a RFI after loading the return address into srr0.

It is notoriously difficult to write bi-endian code though. I really wish there were assembly directives to change the word swapping per instruction instead of doing it manually, for my own sanity.

I think the 970 supports this too, but it’s a bit weirder with the MSR.HV settings.

Note that little endian mode on PPC affects all memory accesses, including real mode when MSR.ILE is set.
OpenAI and Stack Overflow partner to bring more technical knowledge into ChatGPT
Things got finally a bit easier with Postgres 16, which allows you to create replication slots on stand-by servers. It still requires manual intervention to make sure they don't fall too far behind their primary counterpart and to do the failover, but it's not too terrible either and it's guaranteed that failover can happen without missing any events. I've described the approach here: https://www.decodable.co/blog/logical-replication-from-postg.... Postgres 17 should make this even simpler.
Then include templates from other areas pointing out the repeated work. You can’t just hand off a couple of lines in a brief to a dev, especially if they are not aware it’s been done before.
I wouldn't say go is exactly ultra new
I view Proton Mail as the convenient 99,9% case. It's a very polished service and it seems to offer a somewhat higher security baseline than the other email providers which probably don't even try to do anything encryption related.

The maximum security manual OpenPGP 0.1% case is still absolutely necessary though. No doubt about that. Anyone claiming that Proton Mail solved this doesn't actually understand how OpenPGP works. Not that I would fault them for failing to understand this ludicrously complicated stuff.
This is an awesome simulation but what I don't understand is why you wouldn't see any light from the singularity once you're inside the event horizon. Why is it completely black in there? Surely that's not correct?

I get that we have no experimental evidence of what it looks like inside but surely we could simulate the photonic environment?
Tell HN: Enhancing backup security by seperating credentials
## tl;dr

To secure backups without storing backup credentials on the server being backed up, I utilize a separate server to initiate and authenticate the backup process. This prevents potential attackers with access to the production server from also gaining access to the backup storage.

## long story

Some time ago, I read about a situation where a hacker acquired credentials for remote backup storage and proceeded to encrypt or destroy both local and remote data.
Many administrators rely on cronjobs to automate backups to external storage using familiar tools like rsync, BorgBackup, Restic, or Rclone. Naturally, authentication data must be accessible for this process. In the case of BorgBackup, for instance, the key is also necessary if the data is encrypted.
However, the destination, such as cloud backup, isn't typically a one-way "data tomb" where you can only upload data without any capability to read or alter existing data. The authentication data can potentially be exploited to manipulate or destroy a repository, such as in the case of BorgBackup.

## solution approaches

Of course, a tamper-proof write-only backup storage with snapshot backup would be desirable, but most cloud services do not offer this. Also, no provider that I know of offers the option of "pull" backups. This would mean that hundreds of your own server credentials would end up with the cloud provider - and you don't necessarily want that either.

I implement my data backups following the 3-2-1 rule, utilizing multiple cloud services. However, my approach involves:

1. Absence of credentials for the cloud storage on my server.

2. A user account on the server capable of initiating BorgBackup with restricted rights in a restricted environment.

3. Initiation of a backup via a cronjob on another server, which logs in to the primary server, executes BorgBackup with the necessary credentials, and then logs out upon completion.

If an attacker gains access to the system, they won't actively find access credentials for the backup server. Ultimately, they would need to debug the incoming call for BorgBackup or read the memory. Nevertheless, this setup ensures that backup storage credentials are not stored on the production server.

### pros

- Backup credentials remain separate from the server being backed up.

- Prevents manipulation of backups by attackers with access to the production server.

- Backup process is initiated from a separate, secured server.

### cons

- Additional management overhead of maintaining a separate backup initiation server.

- Risk of missed backups if the backup initiation server experiences downtime.

- Complexity involved in setting up the restricted user account and shell on the production server.
> People don't realize how risky housing is compared to other investments.

Do not compare your house to other investments, that's as apple to oranges as it gets.

Compare it to renting, since you have to live somewhere.
It would be far too dark if you did that! You go there on a cloudy day, of course
All of this seems unnecessary, and easily replaced in the provided benchmark by :

i2 = np.ascontiguousarray(pg.surfarray.pixels3d(isurf))

Which does the 100x speedup too and is a "safe" way to adjust memory access to numpy strides.

Whether the output is correct or not is left as an exercise to the author, since the provided benchmark only use np.zeros() it's kind of hard to verify
You get the behavior you incentivize. In the “early days”, design docs were a tool to agree on a direction and provide context to your coworkers about what you’re doing. Later, as new people joined at an exponential rate, they were told by well meaning managers to write the docs for perf reasons, and things kind of spiraled from there. Google’s culture became a cargo cult of itself.

Some companies I worked at after Google were reluctant to discuss their promotion process in detail, because they saw what happens when people microoptimize for it.
I like to do `g++ foo.cc |& tee /tmp/out`
then you can `less /tmp/out`, grep the file, open it in an editor etc.
You're mostly there - your hub definition is spot on - it's basically an electrical repeater and doesn't inspect the packet in any way* and operates at half-duplex.

Switches (specifically Layer 2 switches) will send broadcast frames to all ports*, but traffic that is unicast to a specific MAC address will only be sent to the port where that MAC address was learnt. To keep track of the MAC address to port mappings, a switch will have one or more "forwarding" or "MAC-address" tables.

Routers (and Layer 3 switches) are not necessarily Internet connected, but will mostly be seen in larger networks. Being mostly Ethernet-based these days, they maintain two tables - an ARP table (mapping IP Addresses to MAC Addresses) and a routing table (mapping IP prefixes/routes to destination IP addresses). When an IP packet comes into a port, the router will consult it's routing table and find the most specific route that matches the destination of the packet. From the destination IP of the route, it will then determine the egress interface that it should send the packet towards, then use the ARP table to work out the destination Ethernet MAC address for the Ethernet frame it will construct to transport the IP packet in on it's way to the next-hop router.

* During the early 00s there were "Dual-Speed Hubs", which were basically two hubs (one 10Mbps, one 100Mbps) joined together internally via a two-port Ethernet switch. Fortunately the price of 100Mbps Ethernet switches kept falling and they weren't around too long.

* Provided those ports are all members of the same broadcast domain/VLAN
That's nothing to do with SpaceX specifically. The same applies to any American company building long range rockets. The government classifies this as weapons technology, and so it falls under ITAR - the International Traffic in Arms Regulations [1]. And hiring a foreign employee (or even a multi-national employee) is considered equivalent to a transfer of the underlying technology to that individual's home country or countries. In cases where this would be unlawful, which is most, hiring such persons would be unlawful.

[1] - https://en.wikipedia.org/wiki/International_Traffic_in_Arms_...
Back end development with low-code. How to do it?
You state this distinction as if it's established, but it's not a definition I've personally heard explicitly stated before. If I read the introduction of the Wikipedia article on "privacy", I find the following:

>The right not to be subjected to unsanctioned invasions of privacy by the government, corporations, or individuals is part of many countries' privacy laws, and in some cases, constitutions.

So according to Wikipedia, at least in some cases, privacy is protection against the state. Where does your definition come from?
The question raised is whether one can be as great an artist as Kubrick without succumbing to taking oneself too seriously.
Given your argument is based on the false premise:

> "Real" balsamic vinegar as the title uses the world real ...

(the title does not use the word real at all) I don't believe it is worth effort to rebut.
Speaking absolutely, you can't. Reality is public. You have to choose your risk tolerance level.
Which aspect of the Amazon design doc culture that you loved the most?
https://archive.md/iDe7x
> Most people think: "I bought my house for $200,000 and sold it for $300,000, I made $100,000!!!!!" and neglect to do a proper accounting.

Most people might not do the proper accounting, but not in the direction you suggest.

Maybe they made 100K gross profit but after deducting all the expenses they only made $1000. Ok, was that bad? No, it's great because the comparison is to renting where they would've lost tens of thousands of dollars.
W3C Verifiable Credentials Data Model v2.0
> How is it that SpaceX was able to accomplish the same thing in a fraction of the time, esp considering Boeing has been building aircraft for a century?

I have no particular insight into this subject, but an Ars article [1] from yesterday offers some speculation:

'"The difference between the two company’s cultures, design philosophies, and decision-making structures allowed SpaceX to excel in a fixed-price environment, where Boeing stumbled, even after receiving significantly more funding," said Lori Garver in an interview. She was deputy administrator of NASA from 2009 to 2013 during the formative years of the commercial crew program [...]'

and

'SpaceX was in its natural environment. Boeing's space division had never won a large fixed-price contract. Its leaders were used to operating in a cost-plus environment, in which Boeing could bill the government for all of its expenses and earn a fee. Cost overruns and delays were not the company's problem—they were NASA's. Now Boeing had to deliver a flyable spacecraft for a firm, fixed price. Boeing struggled to adjust to this environment.'

[1] https://arstechnica.com/space/2024/05/the-surprise-is-not-th...
Show HN: Bluesky Link a.k.a. short link to profile
> and this means you have to make $50k profit to not lose

No, it doesn't. Because the alternative was renting, which isn't free.

Even if you end up losing 50K on the home, all told, but if renting for the same number of years would've cost you 100K, you're ahead by 50K.
I am not sure about the speed actually. I wouldn't bet on a MongoDB against a PostGreSQL or even SQLite with JSONB fields and some indexes.

I find NoSQL document databases harder to maintain over time, and you can always have tables with JSON columns.

But moreover, my question was about MongoDB, not about SQL vs NoSQL. And it has been answered, the developer was familiar with it.
Philips is not exactly a European household appliance manufacturer, they've sold off most of that and moved into health tech.
Have you see what rent is like lately?

BTW rent is not much different from a loan. You just do not pay principle.

You are either way paying to use someone else's asset(s).
> The chances of SpaceX failing in an irrecoverable way are zero. In some sort of crazy black swan event, a public offering of stock/equity would easily bring in vast sums for them.

Financially, there is almost zero chance for SpaceX to go under at the point they're at - every launch is profitable for them and the margin goes up with each time they can re-use any component, for boosters their record holder was at 19 launches until it was taken out by bad weather during transport [1].

The real danger for SpaceX is Elon Musk, plain and simple. Either he does something really stupid, something even more dumb than playing personal CSR for neo-Nazis, and the US government says "okay, that's f...ing enough now" as a result, or he goes completely against the US government: push for Mars because he finds out he has some sort of cancer or whatnot and wants to die there while the US government wants to first focus on the moon, or turn off services to Ukraine and instead provide services to Russia... or sell critical information to Russia, China or whatever just to stick the finger to the US government (aka, follow the Trumpian way of "I do what I want, what do they wanna do lol").

Yes, the US government can always go and nationalize SpaceX if need be, so it's not too high of a risk for SpaceX to go completely belly-up, but it would mean years upon years of nasty judicial fights.

[1] https://interestingengineering.com/culture/falcon-9-spacexs-...
Is it a “document” if it has animations and non static (video) media?
I disagree. The temporary ban is due to the platforming of violence. It's the same ban that the US, UK, and EU have in place and for the same reasons. You can't give terror a voice or it gives terrorists an incentive to commit terror. If AJ wants to broadcast they need to stop airing interviews with terror groups.

Other broadcasters critical of Israel seem to have that part figured out.
Beyond the brink is another universe !!
Rust Project Goals Submission Period
> Running out of entropy has never been a thing except in the fevered minds of linux kernel developers.

Linux used user input and network jitter to generate random numbers, not a pure pseudo random number generator. For a perfectly deterministic pseudo random number generator entropy is only required for seeding and even then you can avoid it if you have no problem with others reproducing the same chain of numbers.
Joking like it's 1969.
> unsanctioned invasions of privacy

GPs definition might as well come from wikipedia.
Ask HN: Would anyone like to see a slightly improved UI of HN with Newsletter?
Would anyone like to see a slightly improved UI of HN with Newsletters but with the same simplicity it has now? The text would be slightly bigger and more readable, with featured stories and some newsletter maybe?
I mean, they sold us automation as this great thing that would bring the two day work week by 2000, solve poverty, solve malnutrition, &c. Now they're doing the same with """ai"""

If the undelying system is rotten whatever grows on top will be rotten too
Don't you think that your take is a little bit reductionist?

There are plenty of things which are valuable or bring value, but are never sold or bought.

Case in point: how much is the Sun worth according to you?
I mean, the voice is generated by a computer but the rest of the musical composition is done by a human, no?
I just meant "they don't need to address every possible concern; in fact, they're not required an explanation at all".

(my previous comment was probably a bit sharp; sorry – I'm just so tired of there always being this one person who has to crap all over people's personal projects)
This problem should be solved with a simple form in the billing area, not a solution that probably requires upwards of 40h of work to set up and properly test to a level I would trust it with anything. Even then it's dependent on delayed cost reporting with unknown failure modes. It merely makes a best-effort at containing the costs and it doesn't actually limit them.
Well written, I appreciated the background. Far more enjoyable to read than a good deal of the incoherent articles posted on here.
lemmy.ml https://lemmy.ml/post/70280

Just run a private instance if you want.
Exactly. What I'm always missing in videos of the sun is a time scale and a size scale. I'd love to have an earth time clock and a earth to scale in a corner of the image for reference.
This must've differed a lot between usenet groups then; the ones I was on strictly followed a bottom (or infix) posting pattern and would chastise people who did it differently.
1. all links are click-able at this point; what's more plain-text would force to provide just a link without all the tracking garbage
2. you can have paragraphs and headings... it's just a matter of structure - using html you can write a wall of text just fine
3. not sure if needed, besides you can attach images to plain text (though not inlining) or click-able links to external sources (at exact place)
4. still - easily do-able; it's a matter of particular editor tracking lists - for markdown editors it works just fine and in the end you virtually have a "plain text bullet list"... magic.

The most contagious/problematic issue is (3) and inlining - as I said, it's possible to attach anything but the location is lost. Probably something simple like anchor (again, markdown linking comes to mind) to indicate placement would be just fine...

(I loath html mails with passion…)
Design docs are vehicles for discussion. The idea is that they are the most efficient way to communicate your intention, motivation, why not alternatives.

They are one mechanism that fits in a broader working culture. If you’re working solo, it’s an extravagant exercise. If you’re in a huge team, it’ll enable leveraging more expertise across the team and act as documentation.

There are a few different failure modes.

* Valuing output not outcomes is classic misalignment. (writing 40 page docs for promo — this doesn’t work except for very junior folks who are proving the ability to string words together more than deep eng)

* As mentioned, it’s a bit much of solo teams. Other small teams can comfortably communicate through issues (Jira) plus breakout sessions to hash out ideas.

* Engineers also need to be onboarded to effective design doc writing. (note a top commenter frustrated that their first effort isn’t immediately met with adulation, a possible flag.)

Writing about code is hard. Usually this is an exercise celebrated on HN. If you’re in a team, beware if you find your work is always that which doesn’t need to be explained and deeply considered in a shareable doc.
Terminal emulation of DEC-PS
> Also, public TV is not controlled by the government but by a council that is more or less democratic. Still far from perfect, sure

Of the countries I lived in, the quality of the broadcasting and reporting in Germany has been the better one so far.

And when you see the flow of vomit produced by most of the private television in the countries around, you realise that the compromise is not perfect, but it's nonetheless miles ahead of most other options.

You also quickly realise that most private channels are owned by powerful players pushing their own agenda, which can bring even more bias and one-sidedness.
Which of course leads to the parable of the old engineer with the hammer
SteerMouse
I imagine example.com is either set up to be robust enough to withstand that, or they don't care if it goes down: https://www.iana.org/help/example-domains

Oh interesting, I pasted a URL in plain text and a bit of code in HN turned it into a link you can click on. I think it's totally fine for email clients to do that too.

The only thing I find redeeming about HTML email is the ability to have inline images so when I'm illustrating some sort of process to somebody I can do it more clearly. Without those, I'd create and send a proper document (I don't object to attachments), or publish the information on a wiki/blog/etc - but perhaps a those would be overall better approaches than a 'rich' email.
Why reading whitepapers takes your career to the next level (and how to do it)
Show HN: OCR tools suck at extracting code, so I built Pixelcode
Hi everyone!

I built Pixelcode because i often find myself frustrated when implementing pieces of code from video tutorials. Common OCR tools are just not suited for extracting code snippets. They introduce weird characters, and you lose the code formatting, making you work even more to fix the extracted code.

That’s why I created Pixelcode. In one tap, you can take a screenshot of the code you want to extract and it’s directly copied to your clipboard. You can then paste the extracted code into your favourite IDE, well formatted and without weird characters. It works with more than 30+ languages.